Set up 2-Step Verification

Troubleshoot 2-Step Verification

The G Suite Service Level Agreement does not apply to any services used in connection with 2-Step Verification if the verification process relies on third-party voice or data providers to deliver the verification code.

Account Recovery and Support for Administrators

2-Step Verification is available for all editions of G Suite. However, the enforcement and user backup codes features aren't available for Google Apps Free edition (legacy).

My user lost their phone and is locked out of their account.

Instruct your user to use one of their backup codes to sign in.

Backup codes are provided on their Sign-in verification page when they enroll in 2-Step Verification. These act as backup one-time passwords for use in case they lose their phone. We strongly suggest users to print or write down these codes and store them securely.

If your user has lost their phone and doesn't have their backup code, you can obtain a backup code for them via: Admin console > Users > (select user) > Security > Show backup verification codes

My user didn't enroll in 2-Step Verification and is locked out of their account.

Make sure the user has enrolled in 2-Step Verification: On the dashboard, click Reports, then select Security. Check the 2-Step Verification Enrollment column to see which users have enrolled.

Remove the user from the exception group.

I'm a G Suite administrator, and I'm locked out of my account.

If you've lost your phone, and you don't have your backup codes, and you don't have access to a device that you've accessed your Google Account from via 2-Step Verification in the last month, you should contact another administrator on the domain whom will be able to provide backup codes to you.

If you're still unable to access your account, have another G Suite administrator contact Google via the G Suite direct contact channel. They will need to provide their customer PIN which is in their G Suite control panel under the Support tab.

Will 2-Step Verification work with my company's single sign-on (SSO) service?

If SAML single sign-on (SSO) is enabled for your domain Google's 2-Step Verification will not apply when logging on through your SSO. Super Administrators, however, will continue to sign in using Google authentication and therefore can, and should, use Google's 2-Step Verification. See SAML SSO Service for G Suitefor additional details on using SSO for your domain.